Privacy Notice — Kindred

1. Who we are

This Privacy Notice is issued by Kindred ("Kindred", "we", "us", "our"), the operator of the Kindred childcare benefits platform available at kindredemployeebenefits.com. Kindred acts as the data controller for personal data described below.

2. Categories of personal data we collect

Account data: name, email, login credentials, role (employer admin, employee/parent, provider).
Employer/provider profile data: company name, business details, location(s), logos, photos.
Usage and telemetry: pages visited, features used, device identifiers, IP address, browser type.
Support communications: messages you send through our contact form or support channels.
Tour and access-code activity: provider selections, tour requests, redemption events.

Payment card details are collected and processed by our Merchant of Record, Paddle. Kindred does not store full card numbers.

3. Purposes and legal bases

Providing the service (contract performance): account creation, matching employees with providers, tour requests, access-code redemption.
Security and fraud prevention (legitimate interests): monitoring for abuse, protecting accounts.
Product improvement and analytics (legitimate interests): understanding feature usage.
Customer support (contract / legitimate interests): responding to inquiries.
Legal compliance (legal obligation): tax, accounting, and responding to lawful requests.
Marketing communications (consent, where required): only where you have opted in.

4. How we share personal data

Service providers / subprocessors: hosting, database, analytics, email delivery, and support tooling.
Merchant of Record: Paddle handles sale of subscriptions, payment processing, subscription management, invoicing, and tax compliance.
Employers: if you join through an employer, limited eligibility data is shared with your employer administrator.
Providers: when you request a tour or redeem an access code, relevant contact and eligibility data is shared with the provider you selected.
Professional advisers: legal, accounting, and auditors, where necessary.
Authorities: where required by law or to protect rights and safety.

5. Data retention

We retain personal data only as long as necessary for the purposes described above, to comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, data is deleted or anonymised.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these rights, contact us at the address below. You also have the right to lodge a complaint with your local data protection authority.

7. Security

We implement appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege database policies — to protect personal data against unauthorised access, alteration, disclosure, or destruction.

8. International transfers

Where personal data is transferred outside your country of residence, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

9. Cookies

We use strictly necessary cookies to operate the service (for example, authentication) and may use limited analytics cookies to understand usage. You can manage cookie preferences through your browser settings.

10. Contact

Questions about this notice or your personal data: use our contact page.